Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          ZsTAMHGY2a1mDgnkzKBWqafFBTp7QZkeq7/VTW3dSqQ=
Subject key identifier:   D8:2C:6F:EC:31:BB:DB:CE:CC:10:62:7A:F2:A7:7C:E9:9D:9B:9A:1B
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       019357D2A43B95796B2FACEBFF08AA8E4779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          077F
Signing time:             Sat 23 Nov 2024 07:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:42 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: uf9zg1V0I3Scztd7Nlu26f8IdYsdBIOim2796KuVBRA=)
                          2: Du4l9ps-EMCCopYCYEKnT97OLZY.roa (hash: WNXMpvO/X3kCJr7D0BJ8e2UV6rtmVp4srG1QHQ5J40U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a4:3b:95:79:6b:2f:ac:eb:ff:08:aa:8e:47:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Nov 23 07:00:42 2024 GMT
            Not After : Nov 24 07:00:42 2024 GMT
        Subject: CN=d82c6fec31bbdbcecc10627af2a77ce99d9b9a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:2c:df:8c:a7:c8:a9:05:56:dc:33:52:09:
                    ce:04:df:77:cd:54:7f:ff:9e:d6:1c:b7:0e:fb:c4:
                    1c:73:06:21:0f:13:ca:f1:1e:a3:13:45:cf:ab:93:
                    c1:27:28:9a:e3:88:f8:6c:35:f4:09:3f:cc:6f:3e:
                    43:b9:74:e4:81:27:cf:51:0a:c3:08:6b:24:fc:9d:
                    c8:42:16:ac:4f:3b:f2:11:b8:17:70:bf:3e:f3:8c:
                    07:70:87:ee:87:2d:aa:9d:00:a8:41:b9:ee:26:4b:
                    78:84:da:bd:d0:4a:33:d1:df:36:5b:f2:c5:74:86:
                    a3:06:47:72:54:d1:77:46:40:83:da:23:b5:56:4b:
                    1c:cc:a5:7f:c1:44:b6:61:ae:70:78:24:78:cd:68:
                    53:92:a9:16:25:cb:d7:5f:e9:c9:9e:58:a0:24:8a:
                    e4:50:3c:42:82:4c:7f:29:56:f0:a3:b2:29:ae:b6:
                    e0:80:35:da:13:16:38:aa:96:d1:a4:59:37:07:89:
                    ee:37:f5:57:81:69:a0:79:d3:f8:d9:41:18:2c:45:
                    12:ae:92:f8:a2:c3:64:18:9a:5d:e4:b5:51:14:c0:
                    52:3f:5b:14:2b:48:98:da:c3:b4:10:73:6a:32:0b:
                    77:dd:42:da:34:73:7b:2c:28:ee:d0:ef:22:ee:82:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2C:6F:EC:31:BB:DB:CE:CC:10:62:7A:F2:A7:7C:E9:9D:9B:9A:1B
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:bc:39:b0:e2:24:a3:ea:59:df:eb:66:af:4a:f5:b6:89:
         62:13:09:ab:fc:05:8c:f9:e4:dc:54:ab:aa:76:59:39:68:4e:
         86:34:26:51:31:eb:ba:a9:49:b2:b3:06:39:31:61:38:65:33:
         92:31:75:2f:85:34:63:52:c7:8c:7e:a0:82:90:79:3b:f7:78:
         c2:b9:77:02:bb:78:4e:2f:6c:c9:9b:2b:5f:69:8f:94:4c:77:
         47:8e:45:75:76:c3:6a:c1:cb:bf:82:17:6c:48:86:0f:a9:fa:
         99:e3:bb:45:d1:b7:1b:50:cc:89:90:82:3b:cb:d5:0f:93:7d:
         c0:54:74:6b:9e:aa:30:c2:80:78:b7:37:be:4f:f8:74:b4:16:
         fd:10:a9:91:55:c6:bb:ef:f2:a4:de:3e:c7:64:2c:88:04:04:
         f9:3e:90:bc:d1:7c:5f:8f:d4:f0:ab:db:68:9d:be:a3:e4:c4:
         92:9c:04:82:10:9d:52:a8:05:19:6c:a7:cc:69:67:93:03:70:
         d3:81:69:25:04:08:1b:e9:1d:7e:59:d3:9c:28:7c:21:4e:04:
         03:4c:32:23:63:ca:a2:7b:0d:ea:42:64:d9:76:25:af:f9:5a:
         3d:24:e3:ee:9e:e7:4f:46:05:07:9b:19:95:59:a3:df:c1:08:
         5b:25:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:53 2024 by rpki-client on console-fra.rpki-client.org